Setting Requirements on Forms

[Lisa]

Hi,
I have created a form that collects credit card
information, and in the fields collecting the credit card
digits, I have set requirements so that the information
is entered correctly (i.e., min. and max. of 4 digits per
field). For some reason, there are still some entries
coming through on the form with missing digits. The data
is being collected in a MS Access database. Any ideas
how this could be happening? I have looked at the code,
and the requirements are in the scripting. And when I
have tested it on my computer, it works fine.
Thanks in advance for your help,
Lisa

 

[Mike Mueller]

Lisa
I would make sure your database has those fields set up as
text and not as numbers. If set to number, any leading
zeroes will be removed (eg 0028 = 28). Another thing is
that AMEX is not a 4-4-4-4 card, it is a 3-6-5 if I recall
correctly.

HTH
Mike

message : Hi,
: I have created a form that collects credit card
: information, and in the fields collecting the credit card
: digits, I have set requirements so that the information
: is entered correctly (i.e., min. and max. of 4 digits per
: field). For some reason, there are still some entries
: coming through on the form with missing digits. The data
: is being collected in a MS Access database. Any ideas
: how this could be happening? I have looked at the code,
: and the requirements are in the scripting. And when I
: have tested it on my computer, it works fine.
: Thanks in advance for your help,
: Lisa

 

[Kevin Spencer]

FrontPage uses client-side JavaScript for form validation. The downside to
this is that a few people out there have JavaScript turned off in their
browsers. This prevents any validation from being run. However, it shouldn't
present a problem. After all, just having 16 digits doesn't make for a valid
CC number. It has to be verified by a CC Transaction Service to ensure this.
You need to use better validation for CC numbers. On the other hand, if this
is not an automatic transaction, again, it's not a problem. If you're
shipping some product, I'm sure you're checking the CC numbers when you put
in the orders, right? And I'm assuming that just because a CC number has 16
digits that you're not assuming it's valid, and shipping your product before
you verify the card number.

One additional note: I sure hope you're using SSL (Secure Sockets Layer) on
the form page that collects this CC information! Otherwise, you're
broadcasting all these people's CC information to the world.

--
HTH,
Kevin Spencer
..Net Developer
Microsoft MVP
Big things are made up
of lots of little things.

 

[Lisa]

Thank you. I am guessing that the JavaScript explanation
is exactly what our problem is - we are just collecting
the raw data and processing payments manually, so there
is no card verification on the site itself. We were just
trying to avoid having to play phone tag with people
whose numbers didn't come in correctly.

Don't worry - we do have the SSL secure server set up!
Thanks again,
Lisa